RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer (download)

Subject key identifier:   60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
CA Repository:            repo-rpki.idnic.net/repo/IDNIC-ID/1/
Notification URL:         https://repo-rpki.idnic.net/rrdp/notification.xml
Subordinate resources:
    1: IP: 66.96.224.0/19
    2: IP: 139.0.0.0/16
    3: IP: 139.192.0.0/14
    4: IP: 139.228.0.0/16
    5: IP: 139.255.0.0--140.0.255.255
    6: IP: 140.213.0.0/16
    7: IP: 158.140.160.0/19

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15310 (0x3bce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 26 02:23:49 2021 GMT
            Not After : Mar  2 00:00:00 2022 GMT
        Subject: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:38:1c:07:dc:bb:5a:95:89:df:cb:3e:f1:
                    5c:c2:62:1f:03:15:9e:93:5c:cd:53:a8:18:09:72:
                    e3:30:a5:d2:0d:30:18:3f:8d:3d:0d:a8:d0:f7:aa:
                    73:4b:a9:80:85:bd:9b:af:ba:63:b6:a5:bc:30:35:
                    be:66:f9:b4:9c:26:da:0e:a4:82:09:46:5a:ae:91:
                    81:37:0b:e3:d1:dc:d0:41:4d:41:a8:b8:84:68:39:
                    99:ab:f7:12:49:be:b8:80:0b:98:09:0c:70:28:3b:
                    e5:64:1b:96:84:d4:46:89:cc:17:68:9c:9e:b7:6d:
                    6a:c6:59:6b:07:62:aa:b0:cd:82:d4:29:4a:10:1c:
                    a3:a9:e0:0e:34:ef:9f:c5:82:82:5c:64:3c:c1:f4:
                    e4:a0:7d:10:14:74:2c:f7:87:dd:05:5e:1e:df:dc:
                    cf:90:55:f8:1b:29:46:0f:c0:53:3b:75:0e:a5:ef:
                    c5:a8:e2:43:b1:69:71:1a:c2:18:f4:fe:15:d6:30:
                    3c:f0:b5:07:8b:79:82:37:cb:c2:82:d7:80:c6:a3:
                    6b:b7:8f:8c:61:0f:f3:8f:ce:59:70:99:ad:1a:c8:
                    88:43:af:b2:95:11:94:e1:23:de:54:3b:b3:f5:34:
                    59:c7:4c:ba:13:5f:7a:cd:91:00:c7:35:dc:cd:63:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.224.0/19
                  139.0.0.0/16
                  139.192.0.0/14
                  139.228.0.0/16
                  139.255.0.0-140.0.255.255
                  140.213.0.0/16
                  158.140.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:68:ea:ea:d1:a3:61:47:a2:ac:04:76:48:3c:26:b8:dc:e6:
         90:bb:eb:32:ea:ec:21:ba:10:4b:4a:6d:3a:ab:84:44:f9:db:
         55:ec:ea:eb:5a:f3:85:7f:98:5a:22:43:f7:1c:dc:be:5c:0d:
         41:26:55:fd:37:9b:cb:ed:fe:16:42:d7:71:8a:77:1f:8a:c8:
         7d:cd:1f:56:1d:fb:0b:62:31:0b:f5:c6:51:93:2b:4d:b6:13:
         09:4b:2d:25:cf:bf:0b:b8:30:34:36:52:e6:66:e1:e2:68:56:
         0c:d2:08:df:7c:51:b3:c0:3e:bb:03:b0:2b:50:b7:a1:3b:24:
         0a:49:da:d6:47:ef:2c:ab:06:86:96:dd:9c:b5:af:54:e9:87:
         76:63:aa:79:ec:03:f6:6f:76:bd:dd:5a:b1:9b:49:e6:74:c0:
         9e:4a:d0:cb:ab:48:ad:d4:e6:f3:a8:8e:7a:b5:81:e9:1e:6c:
         8a:6a:b8:ce:9c:da:a6:7d:32:e2:68:a0:21:fc:8b:4c:61:d0:
         22:0b:e8:01:77:5f:01:38:c9:37:f9:fa:5f:85:fd:b4:15:e2:
         2f:20:14:d8:c9:89:54:91:c4:a5:74:2d:c0:d5:b3:14:9d:51:
         4d:be:33:04:56:99:1f:c4:11:a9:c9:cc:75:43:ad:45:6f:78:
         98:4e:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:02 2021 by LibreSSL & rpki-client.